Designing and implementing a benchmark collection for attack simulation in field bus systems

Wiedenmann, Simeon and Mundt, Thomas and Goltz, Johannes (2018) Designing and implementing a benchmark collection for attack simulation in field bus systems. Proc. of AINS 2018 - IEEE Conference on Applications, Information & Network Security.. (In Press)

Text (PDF) p60-wiedenmann.pdf - Published Version Restricted to Registered users only Download (8MB) | Request a copy

Abstract

Field bus systems are used in modern day Building and Industrial Automation Systems to interconnect devices and machines. Due to their common lack of fundamental security features such as encryption or authentication and their high prevalence field bus systems are highly vulnerable to attacks. In parallel research we are investigating how these field buses can be secured. In order to benchmark those security measures we are defining a series of test-data sets simulating attacks. Additionally we describe a formal mechanism to generate those data sets since real world attack data sets are not easily attainable. Therefor we depicted what network traffic is caused by various attack-types and we investigate short and long term cycles within field bus communications. We publicly provide our results and invite other researchers to make use of them and contribute to the developing benchmark collection.

Item Type:	Article
Additional Information:	DOI: 10.1109/AINS.2018.8631474 ISBN Information: Electronic ISBN: 978-1-5386-6925-9 USB ISBN: 978-1-5386-6924-2 Print on Demand(PoD) ISBN: 978-1-5386-6926-6
Uncontrolled Keywords:	field bus, attacks, reference data set, benchmark, IDS, KNX, IT-Security, automation systems, SCADA
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:	Faculty of Engineering, Science and Mathematics > School of Electronics and Computer Science
Depositing User:	Simeon Wiedenmann
Date Deposited:	01 Nov 2018 14:01
Last Modified:	04 Mar 2019 10:16
URI:	http://eprints.iuk.informatik.uni-rostock.de/id/eprint/690

Actions (login required)

View Item